solo-reddit
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external Reddit posts and comments, which could contain instructions aimed at manipulating the agent's behavior.
- Ingestion points: Data is retrieved from
reddit.comthrough scripts (check-post.sh,search-posts.sh) and Playwright browser snapshots. - Boundary markers: There are no explicit delimiters or instructions provided to the agent to isolate the ingested external text from its core instructions.
- Capability inventory: The skill is configured with broad tool access, including
Bash,Write,Edit, and multiplemcp__playwright__*tools for browser automation. - Sanitization: The skill lacks mechanisms for sanitizing or filtering Reddit content before it is processed by the agent.
- [COMMAND_EXECUTION]: The skill executes provided local bash scripts (
check-karma.sh,check-post.sh,search-posts.sh) to query Reddit's public API and process the resulting data usingpython3. - [EXTERNAL_DOWNLOADS]: The skill performs network operations to retrieve metadata and content from
reddit.com, which is a well-known service.
Audit Metadata